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Beyond  that,  and  much  more  difficult  still,  is  the  problem  of  han- 
dling  the  membership  relation  m  an  efficient  way,  so  that  theorem- 
proving  poblems  involving  set  theoretic  notions  can  be  treated 
(J. A.  Robinson,  1967) 

Abstract 

In  the  first  paper  of  this  series  it  was  shown  that  any  unquantified 
fonnala  p  in  the  collection  MLSSF  (multilevel  syllogistic  extended  with 
the  singleton  operator  and  the  predicate  Finite)  can  be  decomposed  as 
a  disjunction  of  set-theoretic  formulae  called  syllogtstic  schemes.  The 
syllogistic  schemes  are  satisfiable  and  no  two  of  them  have  a  model  in 
common,  therefore  the  previous  result  already  implied  the  decidability 
of  the  class  MLSSF  by  simply  checking  if  the  set  of  syUogistic  schemes 
associated  with  the  given  formula  is  empty. 

In  the  first  section  of  this  paper  a  new  and  improved  searching  algo- 
rithm for  syUogistic  schemes  is  introduced,  based  on  a  proof  of  existence  of 
a  'minimum  effort'  scheme  for  any  given  satisfiable  formula  in  MLSF.  The 
adgorithm  addressed  above  can  be  piloted  quite  effectively  even  though  it 
involves  backtracking. 

In  the  second  part  of  the  paper  complexity  issues  are  studied  by  show- 
ing that  the  class  of  ('i)o-stmple  prenex  formulae  (an  extension  of  MLS) 
has  a  decision  problem  which  is  NP-complete.  The  decision  cilgorithm 
that  proves  the  membership  of  this  decision  problem  to  NP  can  be  seen 
as  a  different  decision  algorithm  for  MLS. 


"Fle»earch  supported  by  ENI  and  ENID  ATA  within  the  AXL  project. 


1     Introduction 

In  the  first  paper  of  this  series,  [CG088],  a  family  E  of  set-theoretic  formu- 
lae, cabled  syllogiaiic  schemes  related  to  X,  was  introduced  for  any  given  finite 
collection  X  of  set- variables.  It  was  proved  that  every  syllogistic  scheme  is  satis- 
fiable,  that  is,  it  can  be  made  true  by  suitably  substituting  sets  for  the  variables 
occurring  in  it.  Moreover  no  two  syllogistic  schemes  related  to  the  same  X  in 
E(X)  have  any  model  in  common. 

It  was  shown  in  the  same  article  that  any  unquantified  formula  p  in  the 
collection  MLSSF  (see  below)  cam  be  decomposed  as  a  disjunction  of  syllogistic 
schemes.  A  naive  algorithm  for  determining  whether  or  not  a  given  p  in  F 
is  satisfiable  is  to  calculate  the  set  Ep  of  all  disjuncts  of  p'  and  then  check 
whether  this  set  is  non-empty.  A  technique  was  established  for  extracting  the 
schemes  that  form  Ep  from  the  collection  E(  X )  of  all  syllogistic  schemes  over 
the  variables  X  of  p.  In  other  words,  this  is  a  technique  for  evaluating  p  in  any 
cr  €  E(  A" );  in  fact,  <t  will  belong  to  Ep  if  and  only  if  the  result  of  the  evaluation 
is  TRUE. 

In  the  first  pairt  of  this  paper  we  improve  the  decision  ailgorithm  outlined 
above,  restricting  our  attention  to  formulae  in  MLSF.  These  formulae  involve,  in 
addition  to  (9  and  set-variables,  the  binary  constructs  D,  \,  U,  S,  C,  =,  the  unary 
relator  Finite,  and  the  propositional  connectives.  Therefore,  the  only  construct 
of  MLSSF  not  taken  into  account  in  this  paper  is  {•,...,•}.  We  will  be  able 
to  characterize  the  schemes  <r  in  Ep  in  such  a  way  that  Ep  can  be  generated 
directly,  instead  of  being  obtained  by  filtering  out  the  schemes  in  E(X)  that  do 
not  satisfy  p.  We  also  prove  that  if  Ep  is  non-empty,  then  it  contains  'minimum 
effort'  schemes  (in  a  sense  to  be  explained  in  the  next  paragraph  — and,  in  more 
detail,  in  the  next  section).  Thus  in  order  to  check  p  for  satisfiability  only  such 
schemes  are  to  be  sought  for. 

To  be  more  specific,  even  at  this  informal  level  of  discussion,  we  anticipate 
that  every  syllogistic  scheme  <t  in  E(X)  is  identified  by  a  quadruple  (~,  G,  F,  Z), 
where  —  is  an  equivalence  relation  over  X  and  G  is  a  directed  acyclic  graph 
(or  "DAG")  whose  nodes  are  the  ~-classes.  We  will  see  that  any  (t  in  Ep 
corresponds  to  an  equivalence  relation  ~  of  a  particular  kind,  which  will  be 
called  a  p-compatible  relation,  and  a  DAG  of  a  particular  kind,  to  be  called  a 
p- — compatible  DAG.  If  Ep  is  non-empty,  then  a  finest  p-compatible  relation  ~p 
exists  (this  would  no  longer  be  the  case  if  the  construct  {•,...,•}  was  admitted). 
Moreover  this  relation,  which  can  be  determined  by  methods  of  propositional 
calculus  (see  [Men64]),  provably  has  some  cr  in  Ep  associated  to  it.  Any  a 
zissociated  to  ~p  is  what  we  have  called  above  a  minimum  effort  syllogistic 
scheme;  estabUshing  the  existence  of  one  such  scheme  amounts  to  searching  for 
a  p-~p-compatible  DAG.  This  search,  although  it  involves  backtracking,  can  be 
piloted  quite  effectively  (see  [Omo84,G085]).  In  the  second  part  of  this  paper 
complexity  issues  on  the  decision  problem  for  classes  of  set-theoretic  formulas  are 
studied.  In  particular  the  class  of  (V)o-s;mp/e  prenex  formulae  (an  extension  of 


MLSS)  is  mtroduced  and  \a  proved  to  be  NP-complete.  The  decision  algorithm 
presented  in  the  second  part  of  the  paper  differs  from  the  one  presented  in  the 
first  part  and  provides  another  possible  approach  to  the  decision  problem  for 
extensions  of  MLS. 

Even  this  second  edgorithm  aissociates  a  graph  to  the  formula  to  be  decided. 
The  graph  keeps  information  about  a  possible  model  of  the  formula  in  two 
ways:  by  using  the  nodes  and  the  edges  of  the  graph  to  represent  the  sets  in 
the  model,  some  of  their  elements  auid  the  membership  relation  among  them, 
and  by  defining  a  map  from  the  graph  onto  the  hereditarily  finite  sets  which  is 
obtained  by  induction  and  preserves  all  the  properties  of  the  model  expressible 
by  (V)o-8iinple  prenex  formulae. 

It  turns  out  that,  when  the  formula  is  satisfiable,  that  the  algorithm  can  run 
in  polynomial  time  on  a  nondeterministic  Turing  machine. 

Refined  versions  of  this  algorithm  are  presented  in  [PPm]  to  prove  the  decid- 
ability of  an  extension  of  the  class  of  (V)o-simple  prenex  formulae  and  to  study 
the  decision  problem  of  calsses  of  formulae  involving  a  choice  operator   q. 

2     A  decision  algorithm  for  MLSF 

The  constituents  of  the  theory  MLSF  are: 

•  a  denumerable  infinity  of  set  variables  x,  y,z, . . .; 

•  the  operator  U  (binary  union),  D  (binary  intersection),  \  (set  difference); 

•  the  predicates  =  (equality),  6  (membership).  Finite  (finiteness),  C  (set- 
inclusion); 

•  the  boolean  connectives  -•,  A,  V,  — ►,  «-►. 

By  a  simple  normalization  process  (see  Section  3.8),  the  satisfiability  problem 
for  MLSF  can  be  reduced  to  the  problem  of  testing  for  satisfiability  conjunctions 
of  literals  of  the  following  types: 

{  =  )  X  =  y,  X  =  y  U  z,  X  =  y  \  z, 

{^)x^y, 

{e,  i)  X  €  y,  X  i  y, 

{{•))T  =  {y}, 

(  F  ,  f )  Finite  x,  -■  Finite  x, 

where  each  x  ,  y  ,  z  is  a  set  variable. 

Let  p  be  such  a  conjunction,  and  let  X  he  the  set  of  all  variables  appearing 
in  p.   We  denote  by  p=  the  conjunction  of  the  literals  of  type  (  =  )  belonging  to 


p.  Moreover,  p,  will  stand  for  the  propositional  formula  obtained  from  p-  by 
replacing  the  symbols  =,  U,  and  \  by  ♦-►,  V,  and  &->  respectively,  and  accord- 
ingly regarding  each  set  variable  as  a  propositional  variable.  (Notice  that  in 
our  use  of  the  word  'propositional'  we  are  conforming  here  to  a  well-estabUshed 
tradition  — see,  e.g.,  [Men64].  In  particular,  by  'propositional  variable'  we  mean 
a  variable  that  ranges  over  the  truth  values  FALSE,  TRUE.) 

In  the  following  definition  of  a  p-compaiible  equivalence  relation  ~  over  X, 
our  aim  is  to  capture  the  properties  that  ~  must  enjoy  in  order  that  it  can  be 
"induced"  by  a  model  M  of  p,  in  the  sense  that  i  ~  y  if  and  only  if  r  =  y  is 
true  in  M,  for  all  I,  y  in  X.  It  will  be  obvious  that  there  exists  an  algorithm 
for  establishing  whether  any  given  ~  is  p-compatible  or  not. 

Definition  1  Let  ~  be  an  equivalence  relation  over  the  set  X  of  all  variables 
that  occur  in  a  given  conjunction  p  of  literals  (=),  {^),  (€,  ^)  and  {F,  ^); 
moreover,  let  p^  denote  the  propositional  formula  p,  k,  ^x~y  {x  «-►  y). 

An  acceptable  place  of  the  pairp,  ~  is  any  set  P  C  X  whose  characteristic 
function  XP  »^  "  model  ofp^,  where 

,  .   _    r  TRUE  ifx  €  P  : 
^Py"")  -   \  FALSE  ifx  e  X  \P. 

By  abuse  of  language,  we  will  often  say  that  a  place  satisfies  a  given  propositional 
formula  to  actually  mean  that  its  characteristic  function  satisfies  it. 

An  equivalence  relation  ~  over  X  is  said  to  be  p-compatible  iff  the  following 
conditions  are  met: 

(a)  V  '^  w  if  (and  only  if)  v  ^^  w  is  satisfied  by  every  acceptable  place  of 
P.  ~; 

(b)  ifv^w  belongs  to  p,  then  v  7^  w; 

(cJifv£zo,w^  zi  belong  to  p  and  zq  ~  zi,  then  v  7^  w; 

(d)  if -<  Finite  V  belongs  to  p  then  there  must  exist  an  acceptable  place  P„  such 
that  V  €  Pv  and  P„  does  not  contain  any  variable  w  for  which  Finite  w 
belongs  to  p. 

The  following  lemma  shows  that  any  satisfiable  conjunction  p  admits  p- 
compatible  equivalence  relations,  induced  by  the  models  of  p: 

Lemma  1  Let  M  be  a  model  of  p,  and  let  x  ~m  V  if  and  only  if  x^  =  y^ . 
Then 

(L)  Pi     =     {x    £    X    :    ^    €    x^ }   is  an  acceptable  place  of  p,  ~Mi    where 
(II)  ~jvf  is  p-compatible. 


Proof.  Let  ^  €  Urgx  ^^  ■  Clearly  if  i  ~,\f  y,  then  XP,(a?)  =  Xp,  (y)<  ie- 
(i  «-►  y)''"'*  =  TRUE.  Moreover  if  x  «-►  (y  V  z)  is  in  p.,  then  x  =  y  u  z  is  in 
pand  x^  =  y^  U  z" . 

Hence  ^  €  x^  if  and  only  if  either  ^  €  y*^  or  ^  6  z''^,  i.e.  x/»«(2:)  = 
Xi»«(y)  V  x/»<(^).  proving  that  xp,  ia  a  model  for  x  «-♦  y  V  z.  Analogously  it 
can  be  shown  that  xp<  satisfies  all  remaining  conjuncts  in  p^,  which  proves  that 
XP^  is  an  acceptable  place  of  p,  ~Af,  establishing  (I).  Note  in  addition  that  xp« 
also  satisfies  all  formulae  -"(v  ♦-►  w)  for  which  ^  €  {v^  \  w'^)  U  [w^  \  v^). 

Next  we  show  that  ~Af  is  p-compatible.  First  of  all.  it  is  clear  that  ~Af  is 
an  equivalence  relation.  If  t;  '/'m  w,  for  any  two  variables  v,  w  occurring  in  p, 
then  v^  ^  w^,  so  that  there  exists  ^  €  {v'^  \  w'^)  U  {w^  \  v").  Therefore 
(y  «-  «;)'"'«   =  FALSE,  est  (a)  of  Definition  1. 

(b)  is  an  immediate  consequence  of  the  very  definition  of  ~Af .  in  view  of  the 
fact  that  M  satisfies  p. 

If  V  6  zo>  w  ^  zi  belong  to  p  and  zq  ~Af  2\,  then  v'''  €  Zg*,  w^  ^  zf , 
and  Zq*  =  zf ,  which  imply  v^  ^  u;^  and  in  turn  v  -^m  w-  Having  thus 
shown  that  (c)  of  Definition  I  holds  too,  we  now  proceed  to  prove  the  only 
remaining  condition,  (d).  Let  us  assume  that  -•  Finite  v  belongs  to  p.  Hence  v^^ 
is  infinite.  By  (I),  P(  is  an  acceptable  place  of  p,  ~Af  for  every  ^  in  v'^;  moreover, 
since  obviously  there  are  only  finitely  many  acceptable  places  of  p,  ■^\f,  it  follows 
that  there  must  exist  an  acceptable  place  P  such  that  { ^  €  v^  :  P^  =  P} 
is  infinite.  So,  if  u;  €  P,  then  {^  e  v^  :  P(  =  P]  C  ti;^,  i.e.  ti;'^is 
infinite,  auid  hence  Finite  w  cannot  belong  to  p.  This  completes  the  proof  of 
the  p-compatibility  of  ~Af  >  establishing  the  lemma.  ■ 

An  important  equivalence  relation  is  introduced  by  the  following  definition. 
Definition  2   Given  p  as  above,  for  any  x  and  y  occurring  in  p  we  put 

X  ^p  y  ff  and  only  :/  p,  — ♦  (i  •-►  y)  is  tautological, 
where  p,  is  obtained  from  p  as  in  Definition  1. 
Lemma  2  ^p  is  an  equivalence  relation. 

Proof.  The  lemma  follows  at  once  from  the  reflexivity,  symmetry  and  trauisi- 
tivity  of  «-••■.  ■ 

An  important  property  of  the  equivalence  relation  ~p  is  stated  in  the  fol- 
lowing lemma. 

Lemma  3  Let  ~  be  a  p-compatible  equivalence  relation.   Then 

(i)  t/x  ~p  y  then  i  ~  y,  for  x,  y  in  X; 
(ii)  ~p  IS  p-compattble. 


(In  other  words,  ~p  is  the  finest  p-compatible  equivalence  relation  over  the  set 
X  of  variables  occurring  in  p). 

Proof.  Let  x  ~p  y.  Then  p«  — ►  (x  ♦-►  y)  is  a  tautology.  If  P  is  an  acceptable 
place  of  p,  ~,  then  XP  satisfies  p^,  eind  in  particular  p..  Hence  (i  *-♦  y)^''  = 
TRUE.  This  shows  that  x  <-♦  y  is  satisfied  by  all  acceptable  places  of  p,  ~. 
Therefore  the  p-compatibility  of—  implies  x  —  y,  establishing  (i). 

In  order  to  prove  that  ~p  is  p-compatible,  we  show  that  conditions  (a)-(d) 
of  Definition  1  are  met  for  ~p.  Observe  that  the  acceptable  places  of  p,  ~p  are 
those  sets  P  such  that  xp  satisfies  p..  Therefore,  if  u  «-►  lo  is  satisfied  by  every 
acceptable  place  of  p,  —p,  it  follows  that  p.  — ♦  (v  «-*  u;)  is  a  tautology,  i.e. 
V  ~p  w,  proving  (a). 

To  establish  (b),  assume  that  v  ^  w  occurs  in  p.  If  i;  ~p  w,  then  by  (i) 
above  v  ^  w,  contradicting  the  p-compatibility  of  ~.  Thus  v  y-p  w,  and  (b)  is 
proved. 

Next  suppose  that  zq  ~p  zi,  and  assume  also  that  r  €  zo  and  lu  ^  zi  occur 
in  p.  Then  again  by  (i)  zo  ~  ^ii  implying  v  -/'  w  Thus,  as  above,  v  -/-p  w, 
concluding  the  verification  of  (c). 

Finally,  let  ->  Finite  v  occur  in  p.  From  the  p-compatibility  of  ~  it  follows 
that  there  exists  an  acceptable  place  P„  of  p,  ~  such  that  v  €  Pv  not  containing 
any  variable  w  for  which  Finite  w  occurs  in  p.  Then  it  is  enough  to  observe 
that  P„  is  also  an  acceptable  place  of  p,  ~p.  This  shows  that  (d)  of  Definition  1 
is  also  fulfilled,  which  in  turn  establishes  (ii)  of  the  present  lemma.  ■ 

An  immediate  consequence  of  the  preceding  lemma  is  given  in  the  following 
corollary. 

Corollary  1  If  p  is  satisfiable,  then  ~p  is  p-compatible. 

Proof.  Let  M  be  a  model  of  p.  Lemma  1  shows  that  ~a/  is  p-compatible,  and 
therefore  Lemma  3  entails  the  p-compatibiUty  of  —p.  ■ 

The  preceding  corollary  says  that  the  p-compatibility  of  ~p  is  a  necessary 
(algorithmic ally  verifiable)  condition  for  p  to  be  satisfiable.  In  what  follows,  we 
will  bring  to  light  another  necessary  condition  for  the  satisfiability  of  p.  Taken 
together  with  the  p-compatibility  of  ~p,  the  latter  condition  will  suffice  to  imply 
that  p  admits  a  model  Mp  such  that  ~p  coincides  with  ~Af,  (cf.  Lemma  1). 

In  view  of  LemmM  1(11),  3(i),  this  will  entail  that  when  p  is  satisfiable  then 
any  two  variables  x,  y  of  p  are  ~Mp -equivalent  if  and  only  if  x  ~jvf  y  (i.e.,  the 
set-values  of  i  and  y  coincide)  in  every  model  M  of  p. 

We  incidentally  note  that  the  existence  of  a  finest  equivalence  ~Af ,  with  M 
a  model  of  p,  is  no  longer  insured  if  one  adds  new  operators  to  those  admitted 
in  MLSF.  For  example,  the  models  of  the  formula 

z  =  z\z&s=:  {x}  &c  y  \  s  =  z 


of  MLSSF  can  be  grouped  into  two  classes,  with 

y  ~Afo   ^  -   y  i'Mo  « . 

y  ~M,  ^>  y  T^.vf,  s 

(and  hence 

y  ~.Wo   '  °ot  implying  y  ~,v,   z, 

y  ~Af,    i  not  implying  y  ~.v„   z ) 

whenever  Mo  belongs  to  the  first  class  and  M\  belongs  to  the  second.  Other 
formulas  with  similar  pathology  are  y  ^  {a,  h\  k.  a  ^  h  and  x,  y,  z  ^  {Oi^}- 

The  above  discussion  indicates  that  ~p  is  mainly  related  to  the  equalities 
holding  in  a  sought  model  of  p.  To  fully  take  into  account  the  membership 
literals  as  well,  we  introduce  the  p — -compa<j6/e  directed  acyclic  graphs. 

Definition  3  Let  ~  be  a  p-compatible  equivalence  relation  and  let  S  be  the  col- 
lection of  representatives  of  the  variables  occurring  m  p  (for  example,  «/  we 
assume  that  all  variables  of  set  theory  are  arranged  in  a  denumerable  sequence, 
then  we  can  choose  the  first  variable  m  each  equivalence  class  C  as  the  repre- 
sentative of  C).  A  DAG  (S, ')  is  said  to  be  p-~-compatible  tff 

(a)  u  =  Po  n  S,  for  each  v  in  S,  where  P^  is  an  acceptable  place  of  p,  ~; 

(b)  ifv  6  w  [respectively:  v  ^  wj  occurs  in  p,  then  s^  €  s'v,  [resp.:  3^   ^  s'v] 

where  ««,««,  €  S  and  s„  ~  u,  a„^  ~  u;. 

Later  in  this  section  we  will  show  that  a  normEdized  conjunction  p  of  MLSF 
has  a  model  if  and  only  if  ~p  is  p-compatible  and  there  exists  a  p — ^p-compatible 
DAG  {Sp  ,  '),  where  Sp  is  the  set  of  all  ~p-representatives.  This  provides  at 
once  a  satisfiability  algorithm  (alternative  to  the  one  described  in  Corollary  1) 
for  MLSF:  in  fact,  the  number  of  possible  DAGs  {Sp  ,  ')  is  clearly  finite  and, 
moreover,  there  is  an  algorithm  to  test  whether  a  given  DAG  is  p-~p-compatible. 

A  first  step  towards  proving  the  completeness  of  the  above  test  is  the  fol- 
lowing lenruna. 

Lemma  4  If  p  is  satisfiable,  then  there  exists  a  p-compatible  equivalence  rela- 
tion ~  which  admits  a  p — -compatible  DAG. 

Proof.  Let  M  be  a  model  of  p.  Consider  the  relation  ~,\f  defined  by  putting 
X  ~.v/  y  if  and  only  if  x'^  =  y^.  (II)  of  Lemma  1  shows  that  ~v  is  p- 
compatible.  It  only  remains  to  show  that  the  set  5.v/  of  ~.\/-representative3  of 
the  variables  of  p  can  be  given  the  structure  of  a  p-~.vf -compatible  DAG.  To 
this  end  we  put 

i}  =  {w  £  Sm  :  v'     €  xv^  },  for  every  v  in  S\{  , 

so  that  ii  =  {  X  e  X  :  u'^  G  r"^  }  n  Sjvf ,  where  ,Y  denotes  the  collection  of  all 
variables  occurring  in  p.  Since  by  Lemma  1(1)  the  set  { i  €   -Y  :   v'"^  G  x'^^  } 


ia  an  acceptable  place  of  p,  ~Af,  (a)  of  Definition  4  is  satisfied.  Observing  that 
(b)  of  the  same  definition  is  aui  immediate  consequence  of  the  fact  that  M  is  a 
model  of  p,  it  follows  that  {Sm  ,  * )  is  a  p — Af-compatible  DAG,  which  proves 
the  lemma.  ■ 

Lemma  5  Let  p  be  a  normalized  conjunction  of  MLSF.  If  there  exists  a  p- 
compatible  equivalence  relation  ~  admitting  a  p-~-compatible  DAG,  then  ~p 
(cf.  Definition  2)  is  also  p-compatible  and  admits  a  p-'^ M-<^ompatible  DAG. 

Proof.  Lemma  7  ensures  the  p-compatibUity  of  ~p.  Next,  let  {S^  ,  " )  be  a 
p-~-compatible  DAG.  We  will  show  how  the  set  Sp  of  ~p-representatives  of  the 
variables  occurring  in  p  can  be  given  a  structure  of  p-~p-compatible  DAG. 

For  each  u  in  Sp  let  v»  €  S^  be  such  that  t;  ~  u;.  and  put  v=  { lo  6  Sp  : 
w»  6  V*  }•  We  must  simply  show  that  {Sp  ,  •  )  is  a  p-~p-compatible  DAG.  Since 
(S-, ,  ' )  is  a  DAG,  so  is  (Sp  ,  • )  •  The  p-'-p-compatibility  of  {Sp  ,  • )  caui  be 
proved  eis  follows.  Let  v  E  Sp.   As  {S^  .  * )  is  p-~-compatible,  v,   =  P  r\  S^, 

for  some  acceptable  place  P  of  p,  ~.  We  have  v  =  P  r\  Sp.  Indeed,  ii  w  £.v 
then  tu,  €  v,  =  P  C\  S^.  In  particular  w,  £  P,  and  since  ti;  ~  lu.  we  have 
u;  e  P. 

Therefore  ly  6  P  n  Sp.  Conversely,  if  ty  €  P  C\  Sp,  from  the  fact  that  P 

is  an  cicceptable  place  of  p,  ~  it  follows  u;,  6  P  H  S.^  =  v,,  so  that  w  Ev. 
Hence  (a)  of  Definition  3  is  proved  for  {Sp  ,  • ).      . 

Assume  now  that  S-,  9  s„  ~  u  ~p  ^u  G  Sp  and  that  S^  9  Su,  ~ 
i"  ~p  5«;  €  Sp.  Lenmia  3(i)  impUes  that  g^  ~  s„  and  g^  ~  s^,  so  that 
gv=  {x  £  Sp  :  X,  €  s„  }.  If  u  G  lu  occurs  in  p,  then  by  the  p-~-compatibility 
of  (S«. ,  * )  we  have  s^  6  s'v  showing  g^,  €gv  If  instead  u  ^  u;  is  a  literal  of 
p,  then  flTu,  ^gvi  because  otherwise  {gw)»  €  s'«,  i.e.  s^  €  s'^,  which  contradicts 
the  hypothesis  of  p-~-corapatibility  of  {S^  ,  ' ).  This  completes  the  proof  that 
{Sp  ,  * )  is  p-~p-compatible,  and  the  lemma  is  established.  ■ 

From  the  preceding  two  lemmaa  the  following  corollary  is  immediately  de- 
rived. 

Corollary  2  (Completeness)  Let  p  be  a  normalized  conjunction  of  MLSF. 
Ifp  is  saiisfiable  then  ~p  is  p-compatible  and  it  admits  a  p-^p-compatible  DAG. 
Moreover,  there  is  an  algorithm  to  test  whether '^p  is  p-compatible  and  it  admits 
a  p-"^ p-compatible  DAG. 

In  order  to  show  the  soundness  of  the  test  given  in  preceding  corollary  we 
recall  the  definition  and  some  properties  of  syllogistic  schemes  (cf.  [CG088]). 

DeRnition  4  Let  X  =  {xq  ,  Xi  , . . . ,  x/  }  and  Y  =  {  yo  ,  yi  ,  •  •  •  ,  yy  }  be 
collection  of  set  variables  such  that 

(i)  X  and  Y  have  no  variables  in  common; 


(ii)  there  ts  a  bijection  o  :  r  —  Pow(X)  \  {0}  (so  that  \Y\  =  2l^l   -  1/ 

Moreover,  lei  ~  be  an  equivalence  relation  over  X  whose  equivalence  classes 
are 

{  rOO  .  lOl  .  •  •  •  .   ^OLo  }  '   {  2^10  .   In  .  ■  •  ■  >   IlLi  }.-••.  {  XNO  .   lATl  >  ■  •  •  .   XNLs  )  ' 

u)tM  x„o  -<  ini  -<•••-<  inL.  for  n  =  0,  1,...,  ^,  and  uiAere  we  assume 
loo  -<  iio  -<••■-<  xato  r"<  »*  <*  fixed  ordering  of  the  collection  of  all  variables). 
Let  us  put  Sn  =  x„o  for  n  =  0,  1, . . . ,  iV,  and  let  S  =  {so  ,  8\ , . . . ,  arf}  be 
the  set  of  representatives  of  the  equivalence  classes  of~.  Also  suppose  that  S  is 
given  a  DAG  structure  {S ,  '  )  Let  F  C  Z  C  Y  be  such  thai 

a)  z  C  S,  for  all  z  m  Z; 

b)  there  are  no  distinct  v,  vu  in  S  such  that 

bl)  u  €  s  if  and  only  if  w  G  «,  for  all  s  in  S,  and 

0  0 

b2)  v  €  z  if  and  only  if  w  ^z,  for  all  z  in  Z 
hold  together. 

Lei  6  ,  gzF  denote  the  formulae 

^  =Def  ^}<jiyj   "^  <llL&Ci<iXi   ^  yj^^jKkKjyj  n  y»  =  0), 

QZF   =-Qei  ^n<N{Sn    =    Xni    =    ■■■    =   X„L,    =  U  '^  U  {''}  ) '^ 

z^  z  res 

Sn  €Z  «n  €  r 

(&/€F  Finiteif) )  k  (  &:,6z\f  -■  Finite{z) ) . 

We  put  (TzF  — Def  ^  ^  ^^^  "'"'  '"''"  ''^^''  "  syllogistic  scheme  over  X  ('relative 
to  X  ,  ~  ,  '). 

In  [CG088]  it  is  shown  that  syllogistic  schemes  partition  the  class  of  all 
possible  assignements  over  X .  Other  important  properties  of  syllogistic  schemes 
are  stated  in  the  following  proposition  (for  a  proof  see  [CG088]). 

Proposition  1   Let  (Tzf  *«  i  syllogistic  scheme  relative  to  X  ,  ■^  ,  ' .    The  fol- 
lowing properties  hold: 

(a)  <TzF  >'  solvable; 

(b)  for  any  solution  M  of  <tzf  ^^  have: 

(bl)  for  all  X,  y  in  X,  x^  =  y'^  'ffx^y, 

(b2)  for  all  sq.Si  m  X,  s^  €  s'^  iff  sq-  €  si, 

(b3)  for  all  s  in  5,  s'^  is  infinite  iff  s  £z  for  some  z  ts  Z  \  F. 
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The  following  lemma  gives  the  soundness  of  the  satisfiability  test  whose 
completeness  has  already  been  established  in  Corollary  2. 

Lemma  6  (Soundness)  Let  p  be  a  normalized  conjunction  of  MLSF  and  let 
X  be  the  collection  of  all  variables  occurring  in  p.  If  there  exists  a  p-compatible 
equivalence  relation  ~  which  admits  a  p-^-compatible  DAG  (S,  ' ),  then  p  is 
satisfiable. 

Proof.  We  will  show  that  from  the  hypothesis  it  follows  that  there  exists  a 
syllogistic  scheme  <tzf  relative  to  X,  ~,  *  whose  models  correctly  model  p. 
This,  in  view  of  Proposition  1,  gives  the  result.  We  construct  such  a  syllogistic 
scheme  as  follows. 

For  each  pair  sqi  s\  of  distinct  variables  in  S  for  which  {  x  :  so  €  i}  = 
{x  :   Si  G  i},  we  consider  an  acceptable  place  P,o,i  of  p,  ~  such  that 

So  e  P,o.,  iff«i  i  P»o*i- 

Moreover,  for  each  s  in  S  for  which  -^Finite  v  occurs  in  p  with  s  ~  u,  we 
consider  an  acceptable  place  P,  such  that  s  G  P»  and  P,  does  not  contain  any 
variable  w  with  Finite  u;  occurring  in  p.  Note  that  the  existence  of  such  places 
Psosi  and  P,  is  insured  by  the  p-compatibility  of  ~  (cf.  Definition  1).  Let  Y 
be  a  set  of  vairiables,  disjoint  from  X,  and  let  "•  be  a  bijection  from  Y  onto 
Pow(X)  \  {  0  }.  We  denote  by  Z  the  set  of  all  y  in  y  with  y  =  P  n  S,  where 
P  is  a  place  of  the  type  P,o«i  °'  °f  '^^  *yP®  ^'-  Moreover  we  denote  by  F  the 

0 

set  of  all  z  in  Z  with  z  =  P  n  S  where  P  is  not  of  the  form  P, .  It  is  aji  easy 
matter  to  verify  that  (Tzf  is  a  syllogistic  scheme  over  X ,  ~,  ' . 

In  order  to  complete  the  proof  of  the  lemma  it  only  remains  to  show  that 
every  model  of  <tzf  is  a  model  of  p.  Let,  therefore,  M  be  a  model  of  (Tzf. 
Lemmas  1,  2  imply  at  once  that  M  correctly  models  all  literals  in  p  of  type 
ar  =  2/,  I  ^  y,  X  6  y,  X  ^  y.  Finite  x,  and  -<  Finite  x.  U  v  =  wi  U  W2 
occurs  in  p,  then  supposing  r  ~  s„,  ti;i  ~  s„,j,  and  W2  ~  s^,,,  we  have  (cf. 
Definition  1) 

v^  =  s^  =        U       ^^U       U       {'•^} 
z  £  Z  res 


0 


s„  ez  s„  er 

=  (    U    ^""^    U    {'•''})  ^  (    U    ^""^    U    i^''}) 

zez  res  zez  res 

5^^  ez  ^'"i  ^  ^  s^,  e'z  ««-:.  ^  ^ 

since,  by  the  p-~-compatibiUty  of  (5 ,  * ),  sets  i  and  z  are  of  the  form  P  n  S 
for  some  acceptable  place  P  of  p,  ~,  so  that  s„  €  P  if  and  only  if  s^^   €  P  or 
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Sw,  €  P-  This  shows  that  M  is  a  model  of  the  literals  in  p  of  type  v  =  wiUw^. 
Analogously  it  cam  be  shown  that  the  remaining  clauses  of  type  v  =  lyj  \  1^2 
are  also  modeled  correctly,  thus  showing  that  M  is  model  of  p.  This  completes 
the  proof  of  the  lemma.  ■ 

Combining  together  Corollary  2  and  Lemma  6  we  re-discover  that  the  class 
MLSF  of  formulae  has  a  decidable  satisfiability  problem: 

Corollary  3  An  algorithm  for  testing  a  normalized  conjunction  p  of  MLSF  for 
satisfiability  is: 

(1)  construct  the  equivalence  relation  ~p; 

(2)  check  whether  ~p  is  p-compatible; 

(3)  check  whether  ■^p  admits  a  p-^ p-compatible  DAG. 

3     On  Complexity  Issues 

3.1     The  NP-completeness  of  (V)o-simple  prenex  formu- 
lae. 

In  this  section  we  adress  complexity  issues  on  the  decision  problem  in  set  theory; 
in  particular  we  prove  that  the  clews  of  formulae  (V)o-9imple  prenex  introduced  in 
[BF0S81]  with  the  name  "purely  universal  simple  prenex  formulae"  and  studied 
in  [PPar]  and  [PP88],  has  a  decision  problem  which  is  NP-complete. 

By  decision  problem  for  a  given  class  of  formulae  we  mean  the  problem  of 
establishing  wether  or  not  there  are  sets  (in  a  standard  or  naive  model  of  set 
theory)  that  substituted  for  the  free  variables  of  the  formula  satisfy  it. 

The  class  of  (V)o-9imple  prenex  formulae  introduced  here  has  a  form  which 
is  slightly  different  from  the  definition  given  in  [BFOS8I]  but  the  two  definitions 
can  easily  be  seen  to  be  equivalent  by  using  the  normal  form  theorem  presented 
in  [PParj. 

Definition  5  A  formula  <fi  is  in  the  class  o/(V)o-sjmp/e  prenex  formulae  iff 

i)  ifi  is  of  the  form 

A  ^^ 

i=l,...,n 

ti;Aere 

'Pi  =  (Vx.-,  em,),...  (Vi,,  e  y.„)(/;  v  . . .  v  /• ,) 

with   /]    I  <  j  <  ki    a  literal,  and  possibly  ipi    unquanttfied. 

ii)  the  maximum  nesting  level  of  each  variable  in  every   ipi    is  one,  that  is  in 
any   ipi    no   i,,    is  a   j/i,    for  any  s  and  t  (see  [BFOSSl]  ,  [PPar]). 

Examples:  the  following  are  all  (V)o-simple  prenex  formulae: 
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•  (Vi  €  y)(x  e  z) 

and  expresses  the  fact  that  y  is  included  in  z  :    y  Q  z. 

•  (Vz  e  y)(x  6  z)  A  (Vx  e  y)(ar  ^  u))  A  (Vx  €  z)(a:  G  w  V  x  e  y) 

and  expresses  the  fact  that  y  is  the  set  difference  z\w  :    y  =  z\w 

•  (Vx  €  y)(x  €  z  V  X  e  u;)  A  (Vx  G  z)(x  €  y)  A  (Vx  G  u;)(x  €  y) 
and  expresses  the  fact  that  y  is  the  set  union  zU  w  :    y  =  zUw 

•  (Vx  6  y)(x  =  z)  A  z  G  y 

and  expresses  the  fact  that  y  is  the  singleton  containing  z  :    y  =  {z} 

the  Blowing  is  not  a  (V)o-simple  prenex  formula: 

•  (Vx  G  y)(Vz  G  x)(z  G  y) 

and  expresses  the  fact  that  y  is  a  transitive  set. 

The  previous  examples  also  show  that  MLSS  is  a  subclass  of  the  class  of 
(V)o-simple  prenex  formulae  since  all  the  MLSS's  operators  can  be  substituted 
by  (V)o-simple  prenex  formulae. 

From  now  on  we  will  denote  by  (V)o-s.p.  the  class  of  (V)o-simple  prenex 
formulae. 

3.2     NP-hardness 

We  prove  that  the  problem  of  establishing  whether  or  not  a  formula  in  (V)o-3.p. 
is  satisfiable  ((V)o-8.p.  decision  problem)  is  NP-hard  by  proving  that  the  well 
known  Sat  problem  is  reducible  to  it. 

Let  us  consider  a  formula  <p  of  prepositional  calculus  in  conjunctive  normal 
form,  that  is  : 

'p  =  ipi  A  ...Atfin 

where  i^i, . . . ,  (p„  are  all  disjunctions  of  literals. 

To  build  the  formula  x  of  MLS  that  will  be  equisatisfiable  with  tp  we  need 
to  introduce  a  pair  of  variable  for  each  propositional  letter  appearing  in  <p. 

One  of  these  variables  will  be  cissociated  to  the  positive  literal  obtained  from 
the  propositional  letter  and  the  other  to  the  corresponding  negative  literaU 
Let  m  be  the  number  of  literals  and  Xi,Xi+m  be  the  variables  cissociated  to  a 
complementary  pair  of  literals  . 

Let  ii, . . . ,  X2m  be  the  variables  of  the  type  described  above. 

Moreover  we  introduce  n  variables  yi,  ■  ■  ■  ,yn  associated  to  the  n  conjuncts 
in  (p  . 

Let  us  consider  the  following  set  of  formulas  : 

for  any  literal  /,•  consider  the  formula  : 
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/\      {l/j  €Xi   :   U  occours  in  ^pj)  (1) 

t=l,...,2fn 

Intiiitively  the  y/s  in  the  above  set  are  the  variables  associated  to  those 
disjuncts  that  are  satisfied  if  /,  is  true. 
Moreover  consider  the  formula  : 

l\      {Vj  ^  ^i   '■  '«  "^oes  not  occour  in  ifij}  (2) 

1=1... .,2m 

Then  let  us  consider  the  following  set  of  formulas  : 

l\     {xiEz^-^  n+„  i  z)  (3) 

i=l,...,m 

and  the  formula  : 

A  V       iVi^XiAxi^z)  (4) 

>  =  !,... ,n  1=1, ...,2m 

Now  we  define  x  =  (1)  A  (2)  A  (3)  A  (4)  . 

It  is  immediate  to  verify  that  x  can  be  written  in  polynomial  time  starting 
from  (^  . 

We  prove  that  : 

(^  is  satisfiable  in  propositional  logic 

iff 

X  is  satisfiable  in  the  standard  model  of  set  theory 

If  V?  is  satisfiable  then  interpreting  the  variables  in  x  with  the  following  sets 
we  get  a  model  of  x- 

let  Mv  be  the  set  interpreting  the  variable  v  and 

•  for  all  ;■  G  {1,...  ,n}  let 

where  Ii, . . .  ,In  are  n  different  sets  having  the  same  rank.   Moreover  let 
Ki, . . . ,  K2m  be  2m  different  sets  of  the  same  rank  and  such  that: 

rankKi  =  ranklj  +  2 

•  for  all  i  e  {1,. ..  ,2m}  let 

Mxi  =  {Myj    :   li  occours  tn  ^pj}  L)  Ki 
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•  assuming  that  Xj^, . . . , X;,  are  the  variables  true  in  an  assignment  satisfy- 
ing ifi  ,  let 

Mz  =  { Af  Z;, , . . . ,  Mxj, } 

Because  of  the  choice  of  Ii,.. .  ,I„,Ki, . . .,  /Cjm  we  have  that  M  defines  a 
one-to-one  correnspondence  between  vziriables  and  sets  and  therefore  (1)  and 
(2)  in  X  ^€  satisfied  because  of  the  definitions. 

Clearly  there  can  be  no  i  such  that  Mi,-  €  Mz  and  Mx2i  €  Mz  because  this 
would  correspond  to  a  complementary  pair  of  Uterals  both  true  in  the  assignment 
satisfying  <p  . 

(4)  holds  because  any  disjunct  (fij  must  contain  at  least  a  literal  true  in  the 
aissignment  satisfying  (p  ,  that  is  for  any  j  there  exists  at  least  one  i  such  that 
Myj  G  Mxi  €  Mz  . 

Now  let  us  suppose  x  to  be  satisfiable. 
Let  Mxi, . . . ,  Mx2m,  Myi, . . . ,  Myn,  Mz  be  a  model  for  x- 
It  s  straightforward  to  check  that  if  we  consider  the  aissignment  in  which  any 
literal  /,  such  that  M x,-  £  Mz  is  true  then  we  get  a  model  for  (p.  ■ 


Note  :  the  previous  proof  of  NP-hardness  applies  to  a  very  simple  claiss  of 
formulas  of  set  theory  included  in  (V)o-s.p.  :  the  class  of  unquantified  formulas 
written  in  the  language  of  €  studied  in  [BF0S81]  and  [Villi]. 

Notice  also  that  by  using  the  decidability  result  obtained  in  [BF0S81]  an 
alternative  approach  in  proving  the  NP-hardness  of  the  language  of  €  is  the 
following: 

given  a  formula 

V'  =  (/lv-..V/i,)A...(/rV...vC„) 

of  propositional  calculus,  consder  the  formula  x  obtained  by  associating  to 
each  propositional  variable  p  and  to  its  negation  -■p  the  formulae  Xp  G  j/p  and 
Xp  ^  j/p  respectively;  then  prove  that  ip  and  x  are  equisatisfiable  (in  the  sense 
explained  above)  by  using  the  satisfiabiUty  criterion  contained  in  [BF0S81]. 

3.3     (V)o-simple  prenex  decision  problem  is  in  NP 

We  prove  that  (V)o-3.p.  problem  is  in  NP  by  introducing  a  method  to  test  if  a 
given  formula  in  (V)o-3.p.  is  satisfiable  that  runs  in  polynomial  time  in  the  size 
of  the  input  on  a  nondeterministic  Turing  machine. 

Let  us  consider  a  formula  (p  of  MLS  having  variables  Xi,. . .  ,x„. 

We  start  supposing  <p  to  be  satisfiable  and  describing  a  graph  G  =  iV,E), 
that  we  will  call  the  model-graph  of  p,  which  stores  all  interesting  (with  respect 
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to  the  class  of  formulas  we  are  currently  dealing  with)  information  about  a 
model  of  (p. 

Recall  that  by  a  model  for  <^  we  mean  a  tuple  of  sets  satisfying  the  formula 
in  the  standard  model  of  set  theory. 

Let  the  sets  Mxi, . . . ,  Mx„  be  a  model  for  ifi. 

It  is  not  restrictive  to  extend  the  model  with  the  set  Mxq  =  0. 

We  define  the  nodes  in  V  as  belonging  to  two  groups  : 

•  a  node  u,-  for  each  free  variable  Xj. 

•  a  node  u^j  for  each  ordered  pair    <  Mxi,Mxj  >    associated  with  an 
element  Uij  such  that 

Uij  6  Mxi  \  Mxj 

if  Mxi  \  Mxj  \s  different  from  the  empty  set. 

In  case  Mxi  \  Mxj  is  the  empty  set  we  just  leave  u,_j  undefined. 

Intuitively,  there  are  enough  nodes  to  represent  the  sets  of  the  model  toghether 
with  the  information  about  whether  or  not  their  pairwise  set-differencies  is 
epmty  or  not,  as  we  will  see  afler  the  definition  of  the  binary  relation  E. 

Notice  that  there  are  at  most  polynomially  mamy  nodes  in  V . 

Now  let  us  define  E.  We  defined.  V  in  such  a  way  that  every  node  in  V  is 
associated  to  a  particular  set  which  is  an  element  of  the  set 

{Mio, . . . ,  Mxn)  U  lJ{Mxo, ....  iUr„} 

Given  two  nodes  a  and  6  let  A  and  B  be  the  sets  associated  to  them  (a  set 
of  type  Mxi  for  a  node  of  the  first  group  amd  a  set  of  type  Ui_j  for  a  node  of 
the  second  group),  and  let 

(a,6)  €  £■  <- A  €  B. 

Remairk  :  G  is  acyclic  because  6  is  acyclic. 

The  following  definition  will  explain  in  which  sense  the  nodes  in  V  and  the 
relation  E  represent  the  sets  of  the  model. 

Let  us  define  a  set-representation  of  G  by  defining  the  following  function  • 
that  maps  V  on  sets  by  ^-induction.  A  definition  by  E-induction  is  justified 
from  the  fact  that  E  is  finite  and  acyclic. 

Let  vq,  . . .  ,Vn  be  the  nodes  in  V  associated  to  the  sets  .V/iq,  . . . ,  .V/x,,  and 
let  ko, . . .  ,kt  the  other  nodes  in  v  ,  let  also  /q,  . . . ,  /,  be  t  +  1  sets  having  the 
same  rank  p  with  p  >  \V\  and  such  that  /,  5^  Ij  if  and  only  if  the  set  associated 
to  ki  is  different  from  the  set  associated  to  kj. 

Let 

uf  =  {z*  :   r  €  V  A  {z,Vi)  &  E) 
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^*  =  {Ij}  U  {z*   :   z€V  A  {z,kj)  e  E} 

The  definition  of  •  mirrors  the  property  that  in  G  we  have  enough  infor- 
mation to  model  the  fact  that  some  set  difference  among  sets  of  the  type  Mxi 
is  not  empty,  whereas  this  cannot  be  the  caae  for  the  sets  of  the  type  Uij  since 
there  might  be  no  nodes  to  witness  it. 

This  lack  of  information  forces  us  to  use  the  individuals  7's  in  the  set- 
representation  of  the  nodes  of  type  k. 

Let  us  prove  that  ■*•  is  one-to-one  ,  that  is  :  Va,  6  G  V 

a*  =  b**-*A=:B 

The  j/part  follows  directly  from  the  definition. 

The  only  if   part  is  proved  by  contradiction  :    let  a  be  an  ^'-minimal  for 
which  there  exists  a  node  b  such  that  A  j^  B  and  a*  =  6*. 
There  are  four  cases  : 

1.  a  and  b  are  both  nodes  of  type  v,  that  is  they  are  associated  to  M x,-,  Mxj 
for  some  i  and  j. 

2.  a  is  of  type  v  and  6  is  of  type  k  . 

3.  b  is  of  type  v  and  a  is  of  type  k  . 

4.  a  and  b  are  of  type  k  . 

Case  1  :  in  our  hypothesis  A  =  Mxi  ^  Mxj  =  S,  then  either  Mxi  \  Mxj 
or  Mxj  \  Mxi  is  different  from  the  empty  set  and  therefore  either  u,j  or  Uj,i  is 
defined. 

Let  us  assume  that  Uij  is  defined  . 

In  this  case  Uij  6  Mxj  =  A  and  Uij  ^  Mxj  —  B  but  if  a*  =  6*  then 
(ti,-j)*  G  6*  because  (ut,;)*  €  a*. 

All  the  elements  in  b*  are  z*  for  some  z  because  6  is  of  type  v  (see  the 
definition  of  *  in  case  the  node  is  of  type  u),  hence  there  must  exists  a  z  6  V" 
such  that 

2*  €  6*  A  r  9t  u,-,_,-  A  z*  =  (u<,_,)* 

and  therefore  u,- j  contradicts  the  one-to-one-ness  of  •  (with  z)  and  E- 
preceeds  a  because  {ui_j,a)  G  E:  this  is  a  contradiction  since  we  assumed  a  to 
be  the  £'-minimal  element  on  which  *  was  not  one-to-one. 

The  Ccise  in  which  Uj^i  is  defined  is  analogous. 

C2ises  2  and  3  are  proved  by  observing  that  a  node  of  type  k  is  interpreted 
with  a  set  of  rank  p  -(-  1  whereas  any  node  of  type  v  (as  a  matter  of  fact  any 
node)  is  interpreted  with  a  set  that  can  have  rank  either  strictly  less  than  p  or 
strictly  greater  than  p  -I-  1  . 
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Case  4  is  trivial  because  two  different  ncxles  of  type  k  are  associated  to 
different  Z's.  ■ 

Having  the  one-to-one-ness  of  •  we  can  observe  that  *  correctly  represents 
the  membership  relation  among  the  sets  associated  to  all  the  nodes  in  V ,  that 
is  the  following  property  holds  : 

for  all  a,  6  €  V 

(6)  AeB  ' ►  a*  e  6* 

In  fact,  if  A  £  B  then  (a,  6)  €  E  and  therefore  a*  G  5*  from  the  definition 
•. 

On  the  othe  hand  \i  A  i  B  and,  by  contradiction,  a*  €  b*  then  there  must 
be  a  z  in  V  such  that,  denoting  by  Z  the  set  associated  to  it,  we  have 

Z  9t  A  A  z*  =  a*  €  6*. 

Since  as  we  observed  in  the  proof  of  the  one-to-one-ness  of  *  any  node  a 
has  a  set-realization  a*  whose  rank  is  strictly  less  than  p  or  strictly  grater  than 
p-(-  1,  a*  cannot  be  an  U  for  any  t. 

At  this  point  simply  notice  that  the  previous  equation  would  contraddict  the 
one-to-one-ness  of  •.  ■ 

Now  using  the  one-to-one-ness  of  *  on  the  nodes  of  V  and  property   (6) 
(that  is  the  fact  that    •    correctly  modeb  the  membership  relation),  we  show 
that  <fi   is  satisfied  by  V*, ...,  u*. 

Let  us  assume  that  v*, . . .  ,v*  do  not  satisfy  <p. 

Sice  ¥•  is  a  conjunction  of  i^j's,  then  there  must  be  an  i  such  that  v*. . . .  ,v* 
satisfy  -^ipj- 

In  the  previous  hypothesis  it  is  straightforward  to  check  that  the  sets  v^, . . .  ,v^ 
and  a  certain  number  of  theirs  elements,  say  k*, . . .,  k*,  satisfy  the  matrix  of 
-i^T  :the  fact  that   <p   is  simple  prenex  ensures  that  only  the    v'^'s  and,  at  most 
theirs  elements  can  be  involved  in  the  satisfaction  of  the  matrix  of  -'<^. 

At  this  point  considering  the  sets  associated  to  the  nodes  v*, . . .  ,v*,k*, . . . ,  /t*, 
say  Mil, . . . ,  Mx„,  Ki, . . . ,  Kg  and  using  the  one-to-one-ness  of   *   and  prop- 
erty (G)   we  would  have  that  -"pi  would  be  satisfied  by  Mxi, . . . ,  Mxn,  which 
is  a  contradiction. 

A  proof  of  exactly  the  same  flavour  but  given  in  a  more  general  case  (in  which 
the  derived  algorithm  would  not  run  in  polynomial  time  on  a  nondeterministic 
Turing  machine)  is  given  in  [PPar]  .  ■ 

Summarizing  we  have  that  a  possible  algorithm  to  decide  wheter  or  not  ifi 
in  the  class   (V)o-3.p.  is  satisfiable  can  work  as  follows: 
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step  1.  Guess  the  polynomial  size  graph  G  =  (v,e). 

step  2.  Guess  which  ones  among  the  nodes  are  the  u's. 

step  3.  Define  *  (notice  that  you  do  not  need  to  specify  the  Z's). 

step  4.  Check  that  any  conjunct  in  (p   is  satisfied  hy  v^,. . .  ,v* 


<■ 


The  previous  algorithm  would  run  in  polynomial  time  on  a  nondeterministic 
Turing  machine  proving  th?it  the  decidbiUty  problem  for   (V)o-3.p.  is  in  NP   ■ 


The  NP-completenesa  of  the  (V)o-8.p.  formulae  can  be  seen  aa  a  particu- 
larly favourable  case  in  which  the  model  graph  technique  allows  us  to  decide 
a  formula  in  polynomial  time  on  a  nondeterministic  Turing  machine,  whereas 
there  are  caises  in  which  the  same  technique  does  not  produce  this  kind  of  "faist" 
algorithms. 

As  has  bes  said  before  the  results  in  [PPar]  are  examples  of  such  cases  and 
the  main  reason  for  which  there  the  model  graph  technique  still  produces  de- 
cidability results  but  only  exponentially  time  bounded  algorithms,  Ls  that  those 
classes  of  formulae  are  expressive  enough  to  force  part  of  the  model  to  have 
a  bounded  and  finite  rank  and  therefore  there  is  no  freedom  in  choosing  the 
individuals  (sets  of  type  /). 

The  solution  there  hats  been  to  guess  completely  the  sets  of  such  form  in 
the  model  (that  is  to  define  the  set-realization  *  to  be  the  identity  on  those 
trapped  Mx's)  but  it  would  be  interesting  to  study  different  approaches  to  the 
definition  of  •  that  could  solve  this  problem  without  blowing  the  complexity 
of  the  resulting  algorithm. 
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